Piyusha Akash

Security Researcher & Systems Engineer

Hi, I'm Piyusha Akash (0x3xp).

I am a security researcher and red team operator. I am the founder of Manifold Operations. My primary focus spans AV/EDR evasion, Windows internals, reverse engineering, malware analysis, vulnerability research, and low-level systems programming in C and Rust.

I also conduct upstream security auditing into production networking and virtualization infrastructure. During my research, I identified and disclosed CVE-2026-120830, CVE-2026-120831, and CVE-2026-115449 in libslirp (the user-mode TCP/IP stack powering QEMU virtualization), with official acknowledgements published by Red Hat Product Security.

github ↗ linkedin ↗ email ↗ youtube ↗ resume ↗ manifold ops ↗

selected projects

0x3xp/RustJr ↗ Systems

A hands-on collection of standalone Rust systems programming projects, experiments, and low-level tools. Explores asynchronous networking with Tokio (chat-server, echo-server), raw TCP socket handling, and low-level filesystem I/O (file-ops).

Rust source ↗
0x3xp/Lethe ↗ Kernel

Windows kernel-mode research and red team tool centered on KTIMER, KDPC, and IO_WORKITEM execution chains. Investigates kernel execution, process structures, driver visibility, and defensive boundaries around kernel-level activity.

C source ↗
0x3xp/Artemis ↗ Syscalls

A modular C and x86-64 Assembly research framework for Windows NT research. Covers system service number (SSN) resolution, direct and indirect syscall stub generation, and payload encoding components.

C / ASM source ↗
0x3xp/Native-Adversary-Framework ↗ Offensive

Low-level Windows research collection covering PE parsing, PEB traversal, process injection techniques, shellcode execution, and SetupAPI callback redirection research for EDR evasion analysis.

C / Win32 source ↗

view all projects →

latest posts

Apr 01, 2026 Basic Process Injection — CreateRemoteThread Technique
Mar 31, 2026 Windows DirectComposition — Kernel-Mode Attack Surface Analysis
Dec 01, 2025 Windows Hardening: From Default Install to Fortress

view all posts →

vulnerability disclosures

Nov 2026 CVE-2026-120830 · Libslirp Out-of-bounds Heap Read in icmp_forward_error()
freedesktop.org / libslirp · CVSS 7.4 (High) · Red Hat Acknowledged
Nov 2026 CVE-2026-120831 · Libslirp Queue Pointer Corruption in if_output() causes Host DoS
freedesktop.org / libslirp · CVSS 6.5 (Medium) · Red Hat Acknowledged
Oct 2026 CVE-2026-115449 · Libslirp ICMP Echo Reply Length Desync Leaks Host IP
freedesktop.org / libslirp · CVSS 3.5 (Low) · Red Hat Acknowledged

view all 9 merged patches & advisory details →